Symptom
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: symptom Version: 2.0.1 The skill is a straightforward health symptom logging tool that stores data locally in ~/.local/share/symptom/. Analysis of scripts/script.sh shows no network activity, no unauthorized file access, and no persistence mechanisms. While the SKILL.md contains some shell-like snippets in its documentation table and the script has a minor logic bug (the 'export' command is defined twice in the case statement, making the actual export function unreachable), there is no evidence of malicious intent or high-risk behavior.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Health details you log can remain on your computer in local text files and may be searched or exported later.
The script persistently stores timestamped symptom/activity entries in a local directory.
DATA_DIR="${HOME}/.local/share/symptom" ... _log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }Only log information you are comfortable storing locally; protect, back up, or delete `~/.local/share/symptom` as appropriate.
The command may not be installed by the registry, and any manual script installation would rely on the user trusting the included source.
This is notable because the SKILL.md examples assume a `symptom` command and the manifest includes `scripts/script.sh`, so the CLI installation/provenance path is not fully declared.
No install spec — this is an instruction-only skill.
Install or run the CLI only from the stated source, review the script before use, and avoid running it with elevated privileges.